Error: rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A2826FC9D3611F193B318A5CE1D38B0.roa: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Route Origin Authorization
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A2826FC9D3611F193B318A5CE1D38B0.roa
File: 2A2826FC9D3611F193B318A5CE1D38B0.roa (raw, json)
Hash identifier: w+WktFsX7JWCg1oh9TD03w8qKsPdGbACfqXPckLCAdw=
Subject key identifier: BA:0C:46:17:BC:C0:96:29:EF:6C:72:DB:57:D8:7D:93:C3:D4:8B:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01E157
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A2826FC9D3611F193B318A5CE1D38B0.roa
Signing time: Fri 21 Aug 2026 07:58:59 +0000
ROA not before: Fri 21 Aug 2026 07:58:55 +0000
ROA not after: Thu 08 Oct 2026 07:58:55 +0000
asID: 63099
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 20 Sep 2026 00:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123223 (0x1e157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 21 07:58:55 2026 GMT
Not After : Oct 8 07:58:55 2026 GMT
Subject: CN=6a880543-1e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:34:10:64:c7:9b:3a:08:6b:e2:96:c7:1f:
9a:ce:75:8e:28:9f:28:20:f1:60:42:36:5f:f9:69:
0f:8f:b6:d2:3b:fa:0e:d0:0a:81:f0:54:c0:f4:20:
b6:bb:e4:fb:43:2b:d5:ff:f5:d9:9d:78:08:62:a2:
e4:62:d2:3f:06:76:9f:ed:b5:df:fa:cd:21:7b:cb:
56:7d:50:aa:45:10:0c:be:a0:ad:58:05:6a:66:d8:
07:a5:8b:e3:35:b5:16:df:12:a9:85:37:e5:c3:55:
a9:98:84:94:b0:99:a9:79:2b:22:a5:08:7a:ec:44:
85:ca:ab:41:04:80:84:99:e1:02:f7:95:f5:b9:36:
3a:97:fa:b9:0e:1c:b8:b8:32:75:ec:2e:c4:67:41:
0c:57:ce:36:b1:51:70:ac:da:88:a6:60:c9:b5:7f:
82:6a:2d:af:fa:50:e7:a0:26:3f:74:9d:e3:9c:8b:
82:58:ff:a0:22:27:31:03:7a:8e:b0:83:b1:63:53:
17:e2:39:bc:31:28:67:17:f2:43:7b:7a:a4:7b:e4:
50:97:af:0f:fe:50:5d:e0:6b:dd:dd:d6:36:18:37:
32:87:6e:6a:65:46:70:c4:48:71:45:e0:5f:0a:c4:
12:f4:af:51:84:13:8e:47:33:ef:c6:fd:75:a7:f0:
09:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0C:46:17:BC:C0:96:29:EF:6C:72:DB:57:D8:7D:93:C3:D4:8B:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A2826FC9D3611F193B318A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.196.179.0-154.196.180.255
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.131.0/24
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:f6:cb:b6:25:6a:1d:bc:5d:4d:e3:69:61:2f:13:80:2a:a5:
9a:47:a8:41:55:39:a8:28:81:39:ec:2e:44:f9:96:c4:1a:1c:
fa:32:b6:fa:ab:fb:f4:3f:5a:2f:e3:81:c8:61:38:1e:8e:e3:
f4:75:56:c1:99:bc:ce:8f:19:ea:c6:28:08:97:89:5e:6a:57:
4d:2d:21:17:da:79:1e:cf:b5:4c:aa:0d:19:9d:1d:15:60:5f:
85:16:5b:6e:87:71:80:e0:27:f5:98:22:46:06:06:17:95:f1:
1d:55:43:74:34:65:f0:19:82:2e:1a:bd:3c:ba:a9:6d:97:09:
3e:86:45:f2:09:db:de:97:ad:99:8c:21:47:3e:3a:a7:77:07:
4c:db:05:9b:0f:4b:de:b3:44:25:d5:b1:6f:17:51:04:4e:39:
5f:4c:45:85:cb:b8:26:4b:76:b2:86:e7:95:06:31:b2:af:ce:
77:10:04:32:7a:89:56:24:0f:31:1a:d9:ba:88:ae:59:06:f9:
7d:41:35:66:21:ef:08:3a:b3:19:3b:81:e2:f5:02:1a:db:00:
d0:18:1d:cd:f3:8a:16:23:70:92:6d:54:db:dc:83:ed:95:c7:
de:8f:e5:34:9b:7e:b3:90:42:b0:74:70:31:7c:75:c0:4f:cd:
69:11:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:41:26 2026 by rpki-client